smokeloader | 379f06cf62a9bb8ed54c810931f4f7260fbfa0e4af260bec8cfd3610244000d2 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
15-12-2024 13:38

Sharing

Report Analysis Logs

General

Target

89691031defe4c21cf9c284a4a6c24e6fce0908d35f53622b7e0dd96d4aa3b08.exe
Size

153KB
MD5

61b42db67c8ffff7b8f8a2535239f7ec
SHA1

a8ed809fc9f1888dd3ecc52b73c03a7edc50cc39
SHA256

89691031defe4c21cf9c284a4a6c24e6fce0908d35f53622b7e0dd96d4aa3b08
SHA512

f1111d95681e95fbe11edb2c7910a6576c4cddd0b36b809bcce6effb026f7cbed3d5e18306f61b9e12ae11b69d573b3637214700a95972302754287b243772fc
SSDEEP

1536:D64ATKc7Jj8WLlaMcz+xcd2sXE58mpE4BETPMgjc7LEHdOutHTtkJnin0xSvGO+M:D67VLI4IXE5XE4BEwv7g9OGGJn5kmM

Score

10^/10

smokeloader pub4 backdoor trojan

Malware Config

Extracted

Family

smokeloader

Botnet

pub4

Signatures

SmokeLoader
Modular backdoor trojan in use since 2014.
trojan backdoor smokeloader
Smokeloader family
smokeloader

C:\Users\Admin\AppData\Local\Temp\89691031defe4c21cf9c284a4a6c24e6fce0908d35f53622b7e0dd96d4aa3b08.exe
"C:\Users\Admin\AppData\Local\Temp\89691031defe4c21cf9c284a4a6c24e6fce0908d35f53622b7e0dd96d4aa3b08.exe"
1⤵
PID:2468

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2468-1-0x0000000000720000-0x0000000000820000-memory.dmp

Filesize
1024KB

Download
memory/2468-2-0x0000000000220000-0x0000000000229000-memory.dmp

Filesize
36KB

Download
memory/2468-3-0x0000000000400000-0x0000000000409000-memory.dmp

Filesize
36KB

Download
memory/2468-5-0x0000000000220000-0x0000000000229000-memory.dmp

Filesize
36KB

Download
memory/2468-4-0x0000000000400000-0x000000000058C000-memory.dmp

Filesize
1.5MB

Download